Information Security Magazine

Bootkitty, the first Linux-targeting UEFI bootkit, bypassed kernel security in a proof-of-concept attack

One of the priorities of the newly-approved Von der Leyen Commission II will be to strengthen the healthcare sector’s cyber resilience

A pro-Russian hacktivist collective, CyberVolk, has launched its own ransomware-as-a-service operations, SentinelLabs has found

Russia-backed hackers, known as RomCom, have exploited critical zero-day vulnerabilities in Mozilla Firefox and Windows to launch targeted attacks

The UK’s Nuclear Decommissioning Authority has opened a new hub dedicated to cybersecurity knowledge sharing

The Interpol-led Operation Serengeti has resulted in the arrest of 1000 suspects across Africa

DDoS campaign by Matrix targets IoT devices and servers, exploiting weak credentials and public scripts

Wirral University Teaching Hospital has cancelled outpatient appointments as it responds to a cybersecurity incident

Cybercriminals are ramping up scams via darknet marketplaces, selling phishing kits for $100-$1000

A Trend Micro analysis of Earth Estries found that the Chinese threat actor is using new backdoors to avoid detection during espionage operations

Supply chain management provider Blue Yonder confirmed it was hit by ransomware attack

Some 35% of global organizations report challenges monitoring use of non-approved AI tools

Cifas figures reveal scammers stole over £11bn from UK consumers in the past 12 months

New York State has agreed a $11.3m settlement from two insurance firms following the breach of the personal data of over 120,000 drivers in the state

Zscaler’s latest report finds 54.5% of IoT attacks target manufacturing, with the industry suffering more than three times the weekly attacks of other sectors

npm package @lottiefiles/lottie-player hacked with malicious code, draining crypto wallets via web3 pop-ups

Google’s threat intelligence team uncovered four Chinese PR firms operating networks of inauthentic news sites

UK Minister Pat McFadden will say in a speech at a NATO conference that adversaries are looking at using AI on the physical and cyber battlefield

Meta has closed down two million accounts it says were used in scams such as pig butchering

The UK’s Information Commissioner’s Office argues that regulatory concerns shouldn’t prevent firms sharing data to stop scams